SMART on FHIR (App Launch)

1. App launch overview

   EHR launch vs standalone launch flows, authorization code with PKCE, and the launch and aud parameters.

2. Scopes and launch context

   SMART v1/v2 scopes (patient/*.rs, user/*.cruds), launch context such as patient and encounter, openid, fhirUser and offline_access.

3. Conformance discovery

   .well-known/smart-configuration, capabilities and CapabilityStatement security extensions.

4. Backend services

   System-to-system OAuth2 client_credentials with signed JWT and JWKS.

5. Asymmetric client authentication

   Confidential clients using private_key_jwt and JWKS registration.

6. Symmetric client authentication

   Confidential clients using a shared client secret.

7. Token introspection

   Introspecting access tokens at the authorization server to get scope and context.

8. Best practices

   Guidance on token lifetimes, refresh tokens, PKCE use and safe handling of launch context.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

• HL7 Version 2.x
• Medicare and Medicaid Claims Data (CMS data dictionaries)
• NCPDP SCRIPT
• NCPDP Telecommunication Standard
• OMOP Common Data Model
• Price Transparency (Transparency in Coverage)
• TEFCA
• UB-04 (CMS-1450) Claim Form
• US Core Implementation Guide
• X12 270/271 Eligibility
• X12 276/277 Claim Status
• X12 278 Prior Authorization